Cybersecurity Defense Analyst

Invictus International Consulting, LLC.; Alexandria (VA); On-site; USD 80,000 - 105,000; Full time

Job summary

Invictus International Consulting, LLC. is seeking a Cybersecurity Defense Analyst in Alexandria, VA. The role involves continuous monitoring and incident triage using SOC procedures and enterprise telemetry to detect and respond to cyber threats.

The candidate will document findings, perform escalation as needed, and participate in training to build proficiency across SOC tools. A TS/SCI clearance with CI polygraph eligibility is required.

Qualifications

• Bachelor's degree in a technical discipline is required or 4 years of related experience in lieu of a degree.
• Minimum two (2) years of relevant experience.
• Foundational knowledge of TCP/IP, DNS, HTTP/S, authentication, operating systems and common enterprise security concepts.
• DoD 8570 IAT II or IAM II certification is required.
• Current TS/SCI clearance with the ability to obtain/maintain a CI polygraph.
• Experience working in a DoD or IC environment is desirable.

Responsibilities

• Perform continuous monitoring and initial alert triage under SOC procedures and analyst runbooks.
• Analyze security telemetry from enterprise systems, networks, sensors, firewalls, IDS/IPS, endpoints, and other sources.
• Analyze logs and network activity to identify anomalies and document findings in the case system.
• Conduct cyber defense incident triage including validation, enrichment, scope, urgency, impact, and escalation.
• Enrich alerts using asset, user, network, vulnerability, and threat information before escalation.
• Document actions, evidence, findings, and escalation rationale; manage open cases and turnover requirements.
• Escalate activities beyond procedures or indicating increased risk or broader impact.
• Participate in training, exercises, and qualification activities to build proficiency with SOC tools and methods.

Skills

TCP/IP

DNS

HTTP/S

Authentication

Operating systems

Education

Bachelor's degree in a technical discipline

Tools

SIEM

Security monitoring tools

Endpoint security tools

Network analysis tools

Job description

Title: Cybersecurity Defense Analyst

Location: Alexandria, VA

Clearance: TS/SCI with the ability to obtain and maintain a CI polygraph

Job Details

• Perform continuous monitoring and initial alert triage under established SOC procedures and analyst runbooks
• Perform cyber defense monitoring and analysis using security information from enterprise systems, networks, security sensors, firewalls, intrusion detection/prevention technologies, endpoint sources, and other available telemetry
• Analyze log files and network activity to identify anomalous or malicious behavior, determine potential security impact, and document investigative findings in the authorized case or ticketing system
• Perform cyber defense incident triage, including validation, enrichment, determination of scope, urgency, potential impact, and appropriate escalation
• Conduct basic enrichment of alerts using available asset, user, network, vulnerability, and threat information before escalation
• Accurately document actions, evidence, findings, and escalation rationale; maintain awareness of open cases and shift-turnover requirements
• Escalate activity that exceeds established procedures or indicates increased risk, broader scope, or potential incident impact
• Participate in training, exercises, and qualification activities to build proficiency across SOC tools and investigative methods

Requirements

• Bachelor's degree from an accredited institute in a technical discipline applicable to the position; an additional 4 years of may be substituted in lieu of a degree
• Minimum two (2) years of relevant experience in addition to education level
• Foundational knowledge of TCP/IP, DNS, HTTP/S, authentication, operating systems, and common enterprise security concepts
• Experience with SIEM, security monitoring, network analysis, endpoint security, or comparable cyber defense tools is desired
• Ability to follow technical procedures, document findings clearly, and communicate effectively in a high-tempo operational environment
• Must possess current DoD 8570 IAT II or IAM II certification
• Experience working in a DoD or IC environment desired
• Current active TS/SCI clearance, with the ability to obtain and maintain a CI polygraph

Equal Opportunity Employer/Veteran/Disabled